Refused to execute a JavaScript script. Source code of script found within request.

Question

In WebKit I get the following error on my JavaScript:

Refused to execute a JavaScript script. Source code of script found within request.

The code is for a JavaScript spinners, see ASCII Art.

The code used to be working OK, and is still working correct in Camino and Firefox. The error only seems to be thrown when the page is saved via a POST and then retrieved via a GET. It both happens in Chrome/Mac and Safari/Mac.

Anyone knows what this mean, and how to fix this?

Answer 1

It's a security measure to prevent XSS (cross-site scripting) attacks.

Answer 2

Do you have an example of a page that generates the error? I'm one of the developers of the XSS filter and I'd like to see if we can eliminate this false positive. Thanks.

Answer 3

Same error coming up here with the latest version of Chrome: https://wave.google.com/wave/#restored%3Awave%3Agooglewave.com!w%252BLby6vkE9A.1

Is this the same error?